HP 530 Management Manual page 208

Wireless Security Configuration
Wireless Security Overview
Encryption Methods and
Process
WPA-PSK
1. Enable WPA Security.
2. Enable WPA and/or
WPA2.
3. Set Authentication
Protocols—TKIP, AES,
or both.
4. Set the key.
WPA-802.1X
1. Enable WPA Security.
2. Enable WPA and/or
WPA2.
3. Enable Pre-
authentication.
4. Set the Authentication
Server and Protocols—
TKIP, AES, or both.
5. Set the Radius Key.
6. Allow Non-WPA
stations.
The AP 530 supports the following Extensible Authentication Protocol (EAP) methods: TLS, TTLS, MD5, and PEAP (MS-
CHAP v2) when configured to use an external RADIUS server for authentication. The AP 530 supports only PEAP (MS-
CHAP v2) when configured to use the built-in (local) RADIUS server.
To start, the access point is in the default configuration.
Conventions used:
Vertical bars separate alternative, mutually exclusive elements ( | ).
Braces enclose required elements ( < > ).
Italics indicate variables for which the user must supply a value when executing the command.
7-14
Configuring Encryption in the ProCurve Wireless Access Point 530
WLAN Interface Level Commands
security <wpa-psk>
wpa-allowed
[no]wpa2-allowed
[no] wpa-cipher-tkip
[no] wpa-cipher-aes
wpa-pre-shared-key <key>
security <wpa-802.1X>
wpa-allowed
[no] wpa2-allowed
[no] rsn-preauthentication
[no] wpa-cipher-tkip
[no] wpa-cipher-aes
radius-accounting <primary | secondary> <ip
<ip> | port <port> | key <key>>
radius<primary | secondary>
Additional Notes
Requirements
WPA supported When both TKIP and
station required. CCMP authentication
methods are set, both
If there is a mix of
TKIP and AES stations
stations, some
can associate with the
supporting
access point. WPA
WPA2 and
stations must have
others
either a valid TKIP or an
supporting the
AES key to
original WPA,
communicate.
configure for
both (set both
wpa/wpa2
allowed).
WPA supported • When both TKIP and
station required. CCMP authentication
methods are set, both
TKIP and AES
If there is a mix of
stations can
stations, some
associate with the
supporting
access point. WPA
WPA2 and
stations must have
others
either a valid TKIP or
supporting the
an AES key to
original WPA,
communicate.
configure for
• For WPA2 wireless
both (set both
stations to send pre-
wpa/wpa2
authentication
allowed).
packets, enable Pre-
authentication.